Privacy & Cookie Policy

1. Who we are

TradeCraft Joinery Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and protect your personal data when you visit our website (tradecraftjoinery.co.uk), use our online quotation assistant (quote.tradecraftjoinery.co.uk), or buy bespoke timber windows and doors from us.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

• Company name: TradeCraft Joinery Ltd
• Company number: 17493689 (registered in England and Wales)
• Registered office: 1 Bruce Castle Road, London, N17 8NL, United Kingdom
• Email: hello@tradecraftjoinery.co.uk

2. What personal data we collect

Depending on how you deal with us, we may collect and process:

• Identity and contact data: your full name, company name (where applicable), email address and telephone number.
• Project and delivery data: the job or delivery address, window and door specifications, measurements, drawings, photographs, window schedules and other files, and project notes you give us through the quotation assistant or by email, including your conversation with the quotation assistant.
• Financial and transaction data: billing address, quotation details, order history, invoices and payment records. We do not store full payment card details.
• Technical and usage data: IP address, browser type and version, time zone setting, operating system, and information about how you use tradecraftjoinery.co.uk and quote.tradecraftjoinery.co.uk, recorded by our servers.
• Marketing preferences: only if you choose to receive marketing from us.

Photographs can show parts of your home, its contents or people. Please leave out anything you do not want us to see. You do not have to use the quotation assistant: you can email us instead.

3. How and why we use your personal data (lawful basis)

We only use your personal data when the law allows us to, most commonly on these lawful bases:

• Performance of a contract, or steps you ask us to take before entering into one (Article 6(1)(b) UK GDPR): to prepare and send you accurate, bespoke quotations requested through the quotation assistant or by email; to process your order, manufacture or supply your timber windows and doors and arrange delivery to your job address; and to issue invoices, process payments and provide after-sales support and product warranties.
• Compliance with a legal obligation (Article 6(1)(c)): to keep accurate accounting, tax and business records as UK law and HM Revenue & Customs (HMRC) require.
• Legitimate interests (Article 6(1)(f)): to communicate with you about your quotation, technical specifications or delivery schedule, and to keep our website and quotation assistant working, secure and free from misuse.
• Consent (Article 6(1)(a)): to send you marketing updates or offers, only where you have opted in. You can withdraw your consent at any time.

We do not sell, rent or trade your personal data.

4. How the quotation assistant works

The quotation assistant asks questions and builds a specification using rules set by our team. Any prices it shows are guide prices only. Every quotation is checked by our team and sent to you by our team; the assistant does not email quotations automatically. No decision with legal or similarly significant effects is made about you by automated means alone.

The quotation assistant does not currently send your information to an external artificial intelligence (AI) service. If we decide to use one, for example to help read drawings, we will update this policy before we do, saying which provider receives what and where it processes it.

If you dictate a voice message, your web browser’s own speech recognition service turns the speech into text (for example Google in Chrome, or Apple in Safari). That service may process the audio on its own servers, under its own privacy terms. We receive only the resulting text. You can always type instead.

5. Who we share your data with

We share personal data only where necessary to run our business and fulfil your order:

• Delivery and logistics partners: couriers and hauliers who deliver your windows and doors to your job address.
• Manufacturing and supply partners: the technical specifications and, where necessary, the delivery details needed to make and supply bespoke orders; and installers working on your project, with only what they need.
• IT, cloud and web hosting providers:
  • Hostinger, which provides the server in Düsseldorf, Germany, that runs this website and the quotation assistant, including the files you upload;
  • WPHostee, our domain and email hosting provider, which receives emails sent to hello@tradecraftjoinery.co.uk and forwards them to our Google Gmail account, and through whose mail server we send replies and quotations;
  • Google, which provides our Gmail account, where emails and quotations are read, stored and sent, and Google Fonts, from which our pages load their typefaces (your browser connects to Google, which receives your IP address).
• Professional advisers: accountants, bookkeepers, auditors and legal advisers bound by confidentiality.
• Regulatory and tax authorities: such as HMRC or law enforcement agencies, where UK law requires it.

Google Analytics and Google Ads would receive data only if we switched them on and you accepted analytics or marketing cookies. They are not in use at present.

6. International data transfers

The server that runs this website and the quotation assistant is in Germany, in the European Economic Area (EEA). UK adequacy regulations recognise the EEA as providing an adequate level of protection for personal data.

Some of our providers may also process personal data outside the UK and the EEA. In particular, Google, which provides our Gmail account and Google Fonts, may process data in the United States and other countries. Google states that it complies with the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”) and relies on standard contractual clauses where required. If you use voice dictation, your browser’s speech recognition provider may also process the audio outside the UK.

Where personal data is transferred outside the UK, we rely on UK-approved safeguards, such as adequacy regulations, the UK–US data bridge or the UK International Data Transfer Agreement or Addendum, as offered by the provider concerned.

7. Cookies and similar technologies

Cookies are small files stored on your device; websites can also store small amounts of information in your browser (“local storage”). We use only strictly necessary cookies and storage, which the website and quotation assistant need to work. We would use analytics or marketing cookies only with your consent, and none are in use at present. You can accept all, reject all or choose by category using the banner on this website, and change your choice at any time with the button below.

Change cookie settings

Cookie / storage	Category	Purpose	Duration
tc_consent (cookie and browser storage, this website)	Strictly necessary	Remembers your cookie choice so we don’t ask on every page	6 months
tc_quote_token (browser storage, quotation assistant)	Strictly necessary	Lets you return to the quotation you started on this device	Until you clear your browser’s site data
tc_admin (cookie, quotation assistant)	Strictly necessary	Keeps our staff signed in to the quotation administration area; not set for customers	12 hours
_ga, _ga_*	Analytics (Google Analytics), not in use at present	Would distinguish visitors and measure how the site is used	Up to 2 years
_gcl_au, _gcl_aw, IDE, NID	Marketing (Google Ads), not in use at present	Would measure advert performance and show relevant adverts	Up to 13 months

Analytics and marketing cookies are never set unless you opt in. Google’s own privacy information is at policies.google.com. You can also set your browser to refuse or delete cookies; blocking strictly necessary storage may stop the quotation assistant from working properly.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes we collected it for, including any legal, accounting or reporting requirements:

• Orders, invoices and customer contracts: 6 years after the end of the financial year in which the transaction took place, in line with UK tax and company law (HMRC requirements).
• Unconverted quotations: if you request a quotation and do not go ahead with an order, we keep your quotation and contact details for up to 24 months, so that we can help if you revisit your project. After that they are securely deleted or anonymised.
• Marketing data: until you unsubscribe or withdraw your consent.
• Technical logs and backup copies: only for as long as necessary to keep our systems secure and to restore them after a fault. Backup copies may contain data for a period after it has been deleted from our live systems; it is removed when those backups are replaced or deleted.

You can ask us to delete your data sooner at any time (see section 10).

9. Keeping your data secure

We use appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used or accessed without authorisation, altered or disclosed. These include encrypted (HTTPS) connections to this website and the quotation assistant, password-protected systems, and limiting access to personal data to staff and contractors who need it. Each quotation can be opened only by our team and by the customer who started it. No system is completely secure; if you think your information has been misused, please contact us straight away.

10. Your rights

Under UK data protection law you have the right to:

• Access a copy of the personal data we hold about you;
• Rectification of inaccurate or incomplete data;
• Erasure (“the right to be forgotten”) where there is no compelling legal reason for us to keep processing it;
• Restrict our processing in certain circumstances;
• Data portability: receive your data, or have it transferred to a third party, in a structured, commonly used format;
• Object to processing based on our legitimate interests, or for direct marketing;
• Withdraw consent at any time where we rely on consent (this does not affect anything done before).

To use any of these rights, email hello@tradecraftjoinery.co.uk or write to us at our registered office. We aim to respond to all legitimate requests within one month; the law allows us to extend this in some cases, and we may first need to confirm your identity.

11. Complaints

If you have any concerns about how we handle your personal data, please contact us first at hello@tradecraftjoinery.co.uk so that we can try to put things right. You also have the right to complain at any time to the UK supervisory authority, the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a new “Last updated” date.